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1. INTRODUCTION 

E-business systems have an important role in transaction management and business processes, and 
can create a competitive advantage, to compete in marketing and customer service development. Rice milling 
business is one of the processing industry category businesses [1] which produces rice production that is 
ready to be marketed, so this business has an important role in the agribusiness system in rice in 
Indonesia [2]. The need for increased customer service and transaction security, for business process 
management and presenting information in real-time, has become a new revolution as a breakthrough in 
utilizing the capabilities of internet technology using e-business [3]. Internet networks have innovated 
civilization from all directions, and have transformed business processes into a series of electronic-based 
financial transactions [4]. E-business systems accessed through the internet for business process 
management, electronic commerce, transactions between business partners, customers, suppliers, and other 
stakeholders in the company [5]. The development of e-business systems can improve customer service [6], 
business efficiency, and provide information according to user needs [7], [8]. The opportunity for 
e-business [9] to become a means of supporting business is the strength of the company is competing in 
modern markets [10]. 
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Management of business transactions in an e-business system creates various problems, one of 
which is transaction security [11]. Security guarantees in e-business systems must be provided [12], to 
maintain the convenience of customers and companies in conducting business transactions. Security 
implementation can be done through various techniques such as encryption with homomorphic 
algorithms [13]. Risk control to ensure transaction security in system development with electronic 
transactions using a quantitative model. Determination of standards and limits of transaction security 
involving automatic information exchange using a checker model [14]. E-business maturity is a combination 
of various business processes that involve business structure and activity management, which utilize 
technology to improve services and convenience in transactions [15]. Security issues become a challenge for 
electronic transactions involving online communication, so a system that can protect against attacks or 
misuse of data is needed, as a result of business process complex problems and information exchange 
vulnerabilities, so a security model with cryptographic techniques is developed [16]. An e-business system is 
said to be good if it can accommodate all business processes, and meet the information needs of its 
users [17], share information about products and can directly conduct transactions. 

Encryption in cryptography is a process of encoding information that refers to the security of 
computer-based information content. The digital signature authentication system uses the concept of 
asymmetric key cryptography, implementing hash functions to ensure document authenticity and integrity. 
Factors affecting the insecurity of information exchange can arise due to, inexperienced users, weak 
passwords, or improperly configured security settings [18]. Transaction security in e-business is carried out 
based on the sequence of activities. Security facilities for selling products and improving services can assist 
in providing references for information improvement. Two common methods are used to secure and protect 
the information, namely cryptography and steganography. Information security is very important because it 
supports the performance of e-business systems, in improving services to customers [19]. Cryptography is a 
technique of making messages or information secret and can only be accessed by authorized users through an 
encryption process using a mathematical model to recover secret keys from cryptographic devices [20]. This 
study aims to improve security in the e-business system for rice milling small and medium-sized enterprises 
(SMEs) by implementing cryptographic algorithms, which can strengthen passwords on user accounts and 
hide the exchange of transaction information. Digital transaction security transmitted over computer 
networks can be secured, using cryptographic techniques, which combine symmetric and asymmetric keys, 
so that only authorized users can access and view confidential data information, by implementing a hybrid 
algorithm for message encoding [21]. The proposed hybrid algorithm uses a combination of simple 
symmetric algorithms and the use of public and private keys by applying the Rivest Shamir Adleman (RSA) 
algorithm. 


2. PROPOSED HYBRID ALGORITHM 

Cryptographic techniques are the process of encrypting confidential or private information to 
maintain the confidentiality of messages, except for authorized users. There are two important components in 
the data encryption process, namely algorithms and keys. Algorithms are generally published while keys are 
kept secret to ensure security. The application of cryptography is divided into two types of keys, namely 
symmetrical and asymmetrical. This study proposes a hybrid algorithm that combines the use of the 
symmetric key and an asymmetric key simultaneously to encrypt messages. The application of symmetric 
keys uses a simple symmetric algorithm, and the application of asymmetric keys uses the RSA algorithm, 
based on two mathematical problems, namely number factorization and modulo operations. The application 
of this algorithm produces two different keys but connected mathematically [22]. The key for the encryption 
process is known as the public key and the key used for decryption is the private key. Both are key pairs that 
will be used in securing messages or information [23], [24]. The steps of the hybrid algorithm are shown in 
Figure 1, which is described as follows; 

— The plaintext is original or initial messages like human language in general. 

— Encryption is the process of encoding a message plaintext into ciphertext using a specific algorithm to 
generate a public key, resulting in messages that have no meaning. 

— Decryption is the process of translating the message encrypted (ciphertext) using a private key, thereby 
producing an understandable message (plaintext). 

— Chipertext is a message that has been encrypted and cannot be understood by unauthorized or legitimate 
users. 

Information security by applying a hybrid algorithm consists of two actors, namely the sender and 
receiver of the message. The message encoding stage begins with plaintext which is the original information 
that will be sent by the sender of the message, then the symmetric key encryption process is carried out using 
a simple symmetric algorithm, the results of symmetric key encryption are used in the asymmetric key 
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encryption process that applies the RSA algorithm [25], and produces a public key. Chipertext can be read by 
doing the decryption process using a private key and producing plaintext that is still encrypted, then the 
results are used in the decryption process with a symmetric key to producing the original message or 
plaintext. The application of the RSA algorithm consists of three main processes, namely key generation, 


encryption, and decryption [26]. 
Plaintext 


| symmetric Key | 
(Private Key) | 





RSA Public Key | 











Network (Web page) 





Descryption | 
J 








Receiver 





Ì Plaintext 





Figure 1. Block diagram of the proposed algorithm 


2.1. Simple symmetric algorithm 

Application of symmetric key with an encryption and decryption process using the same key [27]. 
Senders and recipients of messages use the same key model to be able to access information [28]. Symmetric 
algorithms are most commonly used because they can be combined with other algorithms to increase 
security, have good hardware and software performance, efficiency, and flexibility [29]. Symmetric key 
modeling according to alphabetic letters from A to Z, and numeric from 0 to 9, by providing integer 
initialization for each alphabet and numeric, such as A=1, B=2...., 9=36. Meanwhile, spaces are initialized 
with the integer 37. 
Encryption technique 
Make a simple integer initialization for each letter of the alphabet and numeric, assuming I 
Choose an integer randomly assume it is n 
Find the value n“! using the mod 37 operation, assume it is k 
Choose a negative number as a safeguard, assume na 
Find the value of n! using mod 37, assume it is kı 
— Decryption technique 
a. The assignment of a value in the form of an integer according to the initialization for each letter in the 

ciphertext, assume it is I 

b. Multiply the value I by the random value selected in the encryption process o get the values of k and kı 
c. Calculate using the 37 modulo operation 
d. Find the plaintext with P=(I*k*k1) mod 37 


i FP 


2.2. Application of asymmetric keys using the RSA algorithm 

RSA algorithm has a working concept that is factoring two large integers so that it becomes a 
problem that is difficult and challenging, but the encryption strength lies in the key length, if we add the 
length or size of the key is the encryption level will also increase gradually [30]. The main use of the RSA 
algorithm because it is the most secure key exchange mechanism [31], the appropriate domain for the 
implementation of this algorithm is to secure digital key transport signatures [32]. The stages of the RSA 
algorithm is described as follows [33]. 
Procedure for generating keys 
Choose two large prime numbers at random p and q, the condition p#q. 
Calculate the value of n=pxq. 
Calculate m=(p-1)(q-1). 
Select an integer e such that 1<e<m 


aoe 
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Calculate d to satisfy the congruence relationship dxe=1 mod m; d is stored as a private key 
The public key is (e, n) and the private key is (n, d). 

Keep all d, p, q and m values confidential. 

Encryption process, if plaintext P <n, then ciphertext C=P °mod n. 

— The decryption process produces Plaintext: P=C 4 mod n 


| Ga ho 


2.3. Hybrid algorithm 

The application of a hybrid algorithm is based on the concept of working two key types namely 
symmetric and asymmetric keys. This algorithm combines the two keys simultaneously on message 
encryption and decryption process, the merger of two key reasons, in order to improve the security message 
with the modified algorithm. Several previous studies have implemented several algorithm 
modifications [34] to improve the security of information exchange using cryptographic techniques. The 
proposed algorithm works: 

— Encryption process 

Encoding the original message is called "plaintext", done in the following steps; 

a. Plaintext encryption uses a symmetric key, the encryption technique applies a simple symmetric 
algorithm, with work steps as shown in sub-chapter 2.1. 

b. Generating public and private keys for asymmetric keys using the RSA algorithm. 

c. The encryption result in point (a) is used as plaintext in the next encryption process by applying the RSA 
algorithm using a public key, the work steps are shown in sub-chapter 2.2. This process will produce 
ciphertext. 

— Decryption process 

a. The translation of ciphertext messages begins with applying an asymmetric key, namely, decryption using 
the RSA algorithm with a private key, the work steps can be seen in sub-chapter 2.2. The results of the 
decryption process will produce plaintext that will be used in the next process. 

b. Decryption with a symmetric key using a simple symmetric algorithm, the process of translating the 
message from point (a) with the symmetric private key, which produces plaintext or the original message. 


3. RESULTS AND ANALYSIS 
3.1. Selection of integer value for plaintext initialization 

Implementation of a symmetric key algorithm begins by selecting an integer for each letter of the 
alphabet and numeric. Determining the value of the integer will be used in the encryption and decryption 
process by applying the symmetric key. The initialization stages of integer values for alphabetic letters start 
from A to Z, with integer values ranging from | to 26. An example of its application is shown in Table 1. 
Table 2, it shows the results of selecting integer values for numeric values starting from 0 to 9 and one for the 
space character. This stage will be used in the next process, namely the encryption and decryption process 
using a symmetric key. 


Table 1. Determination of the integer value for the alphabet (string) 








Plaintext 
String A B C D E FEF G H I J K L M 
Integer 1 2 3 4 5 6 7 8 9 JOTI 12 T3 
String N 0 P Q R S T U V W X Y Z 
Integer 14 15 16 17 18 19 20 21 22 23 24 25 26 





Table 2. Determination of integer values for numerics 
Plaintext 
Numeric 0 1 2 3 4 5 6 7 8 9 Space 
Integer 27 28 29 30 31 32 33 34 35 36 37 











3.2. Plaintext for testing samples 

The message used as a sample for the implementation of cryptography in e-business systems 
combines two types of keys, namely symmetric and asymmetric. For symmetric keys using simple keys 
while asymmetric keys apply the RSA algorithm. Trial sample text message security using "SIMPLE" shown 
in Table 3. The process of encrypting messages sent by the sender begins by determining the integer value 
for the sample message to be used based on the references from Table 1. The next step is to create a simple 
symmetric key and an asymmetric key using the RSA algorithm. 
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Table 3. Sample messages for the application of the hybrid algorithm 
Plaintext 
String S I M P L E 
Integer 19 9 13 16 12 5 











3.3. Preparation of simple symmetric key 
The steps to generate this key are described in the following steps: 

— Choose a random integer, assume n=5. 

— Find the inverse of n by applying the mod 37 operation, so that n-1=15 is obtained, verify the inverse 
result by multiplying two numbers, then mod 37. (5x15 mod 37=1), then the first key (k)=15. 

— Again choosing a random negative number, assume na=-3. 

— Find the inverse of na=-3 with mod 37 operation, get the value of na-1=12, verify (-3x12 mod 37=1), then 
the second key k1=12. 

Result of the encryption process using simple symmetric key algorithms are shown in Table 4. 


Table 4. Encryption using symmetric key algorithm 
Plaintext Integer()  Cı= (I*n) mod 37 C, =(Ci*n)) mod 37 Chipertext 








S 19 21 11 K 
I 9 8 13 M 
M 13 28 27 0 
P 16 6 19 S 
L 12 23 5 E 
E 5 25 36 9 





3.4. Generate keys RSA algorithm 

— Choose a prime number p=5 and q=11, p#q terms. 

— Calculating the value of n=(5x11=55) 

— Calculate the value of m=(5-1)x(1 1-1)=40 

— Choose the integer e=3 condition 1 <e <m 

— Compute d to satisfy the congruence relationship 3x27=1 mod 40; so that the value of d=27, make it a 
private key 

— Determination of the public key, namely e, n=(3, 55) and the private key, namely n, d=(55, 27). 

The results of the encryption key application using the RSA algorithm are shown in Table 5. 


Table 5. Results of the RSA encryption algorithm 
Chipertext Symmetric Key _ Integer (P) _C=P*mod55__ Chipertext 








K 11 (LIY mod 55 11 
M 13 (13)? mod 55 52 
0 27 (27)3 mod 55 48 
s 19 (19) mod 55 39 
E 5 (5} mod 55 15 
9 36 (36)? mod 55 16 





3.5. Encryption using the RSA algorithm 

RSA algorithm encryption process based on the key that has been created, namely: C=P ‘mod n, 
based on the previous stages is known the value of e=3, and n=55. The message is used for encryption using 
symmetric key encryption results in Table 4. Results of the RSA encryption algorithm, shown in 
Table 5. 


3.6. Hybrid algorithm decryption 

The decryption process using a hybrid algorithm is carried out by translating a sample message, 
namely "KMOSE9", by combining the RSA and symmetric algorithms, so that a plaintext message can be 
obtained that can be accessed by the recipient. The working steps of the hybrid algorithm to carry out the 
decryption process are described as follows; 


3.6.1. Decryption using RSA 
Encryption results of the message sample "KMOSE9" in Table 5, are used for the description 
process by applying the RSA algorithm. The steps taken to produce the translation of the decrypted message 
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are using the equation P=C‘ mod n. Results of message decryption using RSA are shown in Table 6, 
assuming the values of d=27 and n=55. 


Table 6. Results of the RSA decryption algorithm 
Chipertext RSA Algorithm (C) _P=C?’ mod55. Integer (decryption) Plaintext RSA Algorithm 








11 GAI mod 55 11 K 
52 (52) mod 55 13 M 
48 (48) mod 55 27 0 
39 (397? mod 55 19 s 
15 (15)?7 mod 55 5 E 
16 (16) mod 55 36 9 





3.6.2. Symmetric algorithm decryption 

The final stage for translating the message is done by a decryption process using a symmetric key 
algorithm. In the previous process, it was known that the values of k=15 and kı=12, so that to translate the 
ciphertext into the original message "plaintext" P=(I*k*k1) mod 37, I is the decrypted plaintext using the 
RSA algorith. Results of the description process using the symmetric algorithm shown in Table 7, is the last 
stage of the application of a hybrid algorithm that combines the RSA and symmetric algorithms, so that the 
original or original plaintext message is obtained. 


Table 7. Symmetric key algorithm encryption results 
Chipertext RSA Integer (I) P =(1*k*k,) mod37 P Plaintext 








K 11 (11*15*12)mod37 19 S 
M 13 (13*15*12)mod37 9 I 
0 27 (27*15*12)mod37 13 M 
s 19 (19*15*12)mod37 16 P 
E 5 (5*15*12)mod37 12 L 
9 36 (36*15*12)mod37 5 E 





3.7. Analysis of experiment results 

Testing the results of the encryption using an example of the message "SIMPLE", by performing a 
simulation using Matlab, shows that the message security technique using cryptography uses a hybrid 
algorithm. Based on the experiment, it shows that the time needed to encrypt and decrypt messages is longer 
for a hybrid algorithm, compared to implementing one algorithm. In the implementation of cryptography, an 
important issue of concern is the file size or the number of strings and the time it takes to complete the 
encryption and decryption process which affects system performance and directly shows the complexity of 
each algorithm that has different work steps [35]. The hybrid algorithm has a stronger level of security 
because to translate messages or information one must perform a decryption process using two types of keys 
at once. Table 8 shows the comparison of the test results based on time (millisecond). 


Table 8. Comparison of algorithmic performance based on time 








Algorithm Number of Strings _ Encryption Time (millisecond) Decryption Time (millisecond) 
Simple Symmetric Key 300 1501 1550 
600 2050 2136 
900 3751 3970 
1200 4089 4172 
1500 4870 4997 
RSA 300 2087 2245 
600 2506 2897 
900 3998 4184 
1200 4561 4830 
1500 5072 5239 
Hybrid (Simple Symmetric & RSA) 300 2456 3053 
600 4654 5410 
900 6342 7521 
1200 8569 9064 
1500 9350 10043 





Experiments in Table 8, using samples of different numbers of strings, show that the running time 
required for the decryption process is longer than the encryption process. The application of the hybrid 


TELKOMNIKA Telecommun Comput El Control, Vol. 19, No. 5, October 2021: 1535 - 1543 


TELKOMNIKA Telecommun Comput El Control O 1541 





algorithm requires high running time, due to the weaknesses of the RSA algorithm which has a working 
concept of finding the multiplication factor of two large prime numbers [36]. Another factor is the 
application of two types of keys simultaneously for both the encryption and decryption processes, resulting in 
the greater complexity of the hybrid algorithm. The problem of running time can be overcome, by combining 
the symmetric key with other suitable algorithms, including the encryption technique using the advanced 
encryption standard (AES) method which can be considered in terms of saving the time needed for the 
decryption process [37]. 


4. CONCLUSION 

The convenience of transacting and exchanging information in an e-business system can be supported 
by information security guarantees that apply cryptographic techniques. The application of the proposed 
hybrid method can improve the security of messages or information through the encryption process by 
combining two types of keys, namely symmetric and asymmetric keys, but in implementation, the time for 
the decryption process is longer than encryption. The main cause of the high running time during the 
decryption process is due to factors in the multiplication of two large prime numbers, the work step of the 
RSA algorithm. 
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